~398 Thousand IP addresses observed from May to December 2012
To get raw lists of the data go to Download. For an explanation of what this data is and how it was obtained, see Paper.
Servicename | Product | Count | Percent |
---|---|---|---|
telnet | Cisco router telnetd | 101051 | 25.331 |
telnet | Cisco IOS telnetd | 60090 | 15.063 |
telnet | 51833 | 12.993 | |
telnet | Cisco 1721 router telnetd | 45414 | 11.384 |
no match | -/- | 41742 | 10.463 |
http | Microsoft HTTPAPI httpd | 14039 | 3.519 |
http | 9122 | 2.287 | |
ssl | TLSv1 | 9071 | 2.274 |
http | Microsoft IIS httpd | 7282 | 1.825 |
irc | Dancer ircd | 4095 | 1.026 |
ssl | SSLv3 | 3584 | 0.898 |
http | SonicWALL | 3429 | 0.86 |
http | MiniServ | 3365 | 0.844 |
http | Apache Tomcat/Coyote JSP engine | 3333 | 0.835 |
eggdrop | Eggdrop IRC bot console | 3264 | 0.818 |
http | Apache | 2972 | 0.745 |
http | lighttpd | 2567 | 0.643 |
chat | AIM or ICQ server | 2558 | 0.641 |
http | Boa HTTPd | 1465 | 0.367 |
http | libwww-perl-daemon httpd | 1243 | 0.312 |
http | Medusa httpd | 1181 | 0.296 |
http | thttpd | 1095 | 0.274 |
http | D-Link DIR-300 WAP http admin | 958 | 0.24 |
http | Hikvision-Webs | 773 | 0.194 |
http | Netwave IP camera http config | 755 | 0.189 |
telnet | Cisco LocalDirector telnetd | 752 | 0.189 |
ssh | OpenSSH | 736 | 0.184 |
http | Jetty | 709 | 0.178 |
http | Allegro RomPager | 707 | 0.177 |
vnc | VNC | 575 | 0.144 |
http | GoAhead-Webs httpd | 542 | 0.136 |
http | AIM | 528 | 0.132 |
http | WebLogic httpd | 465 | 0.117 |
http | uc-httpd | 464 | 0.116 |
shoutcast-publishing | SHOUTcast publishing port | 435 | 0.109 |
http | nginx | 431 | 0.108 |
http | Cross Web Server | 407 | 0.102 |
http | Avtech AVN801 network camera | 376 | 0.094 |
ssl | TLS | 363 | 0.091 |
http | Businesspass-Passepartout | 362 | 0.091 |
http | Indy | 314 | 0.079 |
remoting | MS .NET Remoting services | 299 | 0.075 |
http | Tinyweb httpd | 284 | 0.071 |
http | GeoVision GeoHttpServer for webcams | 265 | 0.066 |
upnp | TwonkyMedia UPnP | 254 | 0.064 |
http | Play | 233 | 0.058 |
http | mini_httpd | 224 | 0.056 |
vnc | RealVNC Enterprise | 207 | 0.052 |
http | eHTTP | 205 | 0.051 |
http | Mxhttp 1.0 | 198 | 0.05 |
http-proxy | Squid http proxy | 185 | 0.046 |
ftp | Microsoft ftpd | 177 | 0.044 |
http | Tiny WebServer | 173 | 0.043 |
upnp | Microsoft Windows UPnP | 172 | 0.043 |
http | Rex media encoder http config | 167 | 0.042 |
ssh | 166 | 0.042 | |
http | Squeezebox Server (7.5.1 - 30836) | 165 | 0.041 |
http | Veritas backup exec continuous protection httpd | 160 | 0.04 |
telnet | corporate network! | 153 | 0.038 |
http | httpd 1.1 | 148 | 0.037 |
http | Oracle WebLogic Server | 134 | 0.034 |
http | WindWeb | 133 | 0.033 |
http | DrcomServer1.0 | 125 | 0.031 |
http | Boa httpd | 124 | 0.031 |
telnet | PE-4 Router | 120 | 0.03 |
http | Squeezebox Server (7.6.1 - 33110) | 114 | 0.029 |
msdtc | Microsoft Distributed Transaction Coordinator | 112 | 0.028 |
http | ImagiaTek | 112 | 0.028 |
http | Router | 111 | 0.028 |
http | PunkBuster http config | 108 | 0.027 |
http | TwistedWeb httpd | 105 | 0.026 |
arcserve | ARCserve Discovery | 104 | 0.026 |
http | Virata-EmWeb | 102 | 0.026 |
http | Mbedthis-Appweb | 101 | 0.025 |
http | CherryPy httpd | 100 | 0.025 |
ssh | Dropbear sshd | 99 | 0.025 |
http | Netgear DG834 router http config | 98 | 0.025 |
http | MX4J | 97 | 0.024 |
psql | Pervasive.SQL Server - Relational Engine | 96 | 0.024 |
http | Logitech Media Server (7.7.2 - 33893) | 95 | 0.024 |
ftp | 95 | 0.024 | |
telnet | Linux telnetd | 92 | 0.023 |
rtsp | 90 | 0.023 | |
http | VideoLAN Server streaming media | 90 | 0.023 |
http | AvantiHTTPd | 90 | 0.023 |
time | 83 | 0.021 | |
http | DVR Systems webcam http interface | 83 | 0.021 |
xml | 81 | 0.02 | |
irc-proxy | ShroudBNC irc-proxy | 81 | 0.02 |
http | Secure Computing Sidewinder firewall http admin | 80 | 0.02 |
http | PDR-M800 | 80 | 0.02 |
telnet | cisco router pgp-gw3.ccl.ru | 79 | 0.02 |
http | Transmission BitTorrent management httpd | 75 | 0.019 |
http | Panasonic webcam http config | 75 | 0.019 |
http | Caucho Resin JSP engine | 74 | 0.019 |
http | Mongrel httpd | 73 | 0.018 |
http | GoAhead-Webs embedded httpd | 72 | 0.018 |
vnc | 71 | 0.018 | |
telnet | This Router | 71 | 0.018 |
http | http server 1.0 | 71 | 0.018 |
vnc | RealVNC Personal | 69 | 0.017 |
mysql | MySQL | 69 | 0.017 |
http | GM Streaming Server httpd | 69 | 0.017 |
http | WYM httpd | 68 | 0.017 |
http-proxy | Ncat http proxy | 67 | 0.017 |
http | Icecast streaming media server | 67 | 0.017 |
http | Allegro-Software-RomPager | 67 | 0.017 |
http | Draytek Vigor ADSL router webadmin | 66 | 0.017 |
http | HTTPsrv | 65 | 0.016 |
ftp | FileZilla ftpd | 65 | 0.016 |
http | Linux | 57 | 0.014 |
http | BaseHTTP | 57 | 0.014 |
ftp | vsftpd | 55 | 0.014 |
http | OwnServer1.0 | 54 | 0.014 |
http | libwww-perl-daemon | 52 | 0.013 |
telnet | cisco router tusm-gw3.ccl.ru | 50 | 0.013 |
ssh | SCS sshd | 50 | 0.013 |
http | ZNC IRC bouncer http config | 50 | 0.013 |
http | Gadspot/Avtech AV787 webcam http config | 50 | 0.013 |
telnet | Enterasys XSR Security Router telnetd | 49 | 0.012 |
http | TP-LINK Router | 49 | 0.012 |
ftp | ProFTPD | 48 | 0.012 |
socks5 | 46 | 0.012 | |
smtp | Microsoft ESMTP | 46 | 0.012 |
http | WIWA | 46 | 0.012 |
http | Ubicom | 44 | 0.011 |
http | monit httpd | 44 | 0.011 |
http | dcs-lig-httpd | 44 | 0.011 |
ftp | Serv-U ftpd | 44 | 0.011 |
http | uTorrent WebUI | 43 | 0.011 |
http | MS-SDK-HttpServer | 43 | 0.011 |
shoutcast | SHOUTcast server | 40 | 0.01 |
ssl | Microsoft IIS SSL | 39 | 0.01 |
http | TeleEye | 38 | 0.01 |
telnet | Quintum Tenor D3000 VoIP gateway call event telnetd | 37 | 0.009 |
http | uTorrent utserver web interface | 37 | 0.009 |
http | B2BPROCESSOR | 37 | 0.009 |
http | Microsoft ISA httpd | 36 | 0.009 |
soap | gSOAP soap | 34 | 0.009 |
http | DD-WRT milli_httpd | 34 | 0.009 |
ftp | Pure-FTPd | 34 | 0.009 |
ssh | Cisco SSH | 33 | 0.008 |
http | Axigen-Webmail | 33 | 0.008 |
telnet | VPN-5 Router | 32 | 0.008 |
http | Zope httpd | 30 | 0.008 |
http | Thin | 30 | 0.008 |
http | Microsoft Windows Media Server | 30 | 0.008 |
http | AOLserver httpd | 30 | 0.008 |
http | TRENDnet TV-IP110w or TV-IP422W webcam display httpd | 29 | 0.007 |
http | MochiWeb Erlang HTTP library | 29 | 0.007 |
http | Mobotix Camera http config | 29 | 0.007 |
http | D-Link router/Airlink NAS http config | 29 | 0.007 |
telnet | Netgear broadband router or ZyXel VoIP adapter telnetd | 28 | 0.007 |
http | D-Link/Airlink IP webcam http config | 28 | 0.007 |
http | CCcam card sharing system http config | 28 | 0.007 |
http | Axigen-Webadmin | 28 | 0.007 |
http | Logitech Media Server (7.7.1 - 33735) | 27 | 0.007 |
http | Linksys router http config | 27 | 0.007 |
tandem-print | Sharp printer tandem printing | 26 | 0.007 |
redis | Redis key-value store | 26 | 0.007 |
http | MS .NET Remoting | 26 | 0.007 |
http | Intoto httpd | 26 | 0.007 |
java-rmi | Java RMI | 25 | 0.006 |
http | WEB SERVER | 25 | 0.006 |
http | Router Webserver | 25 | 0.006 |
http | MS .NET Remoting httpd | 25 | 0.006 |
http | Goliath | 25 | 0.006 |
http | BaseHTTPServer | 25 | 0.006 |
H.323-gatekeeper | CompTek AquaGateKeeper | 25 | 0.006 |
vnc-http | Ultr@VNC | 24 | 0.006 |
svnserve | Subversion | 24 | 0.006 |
http | TRENDnet TV-IP100 or TV-IP110 webcam display httpd | 24 | 0.006 |
http | TornadoServer | 24 | 0.006 |
http | RapidLogic | 24 | 0.006 |
http | Oracle Application Server 10g httpd | 24 | 0.006 |
http | MultView WEB Server V1.1 | 24 | 0.006 |
telnet | Quintum Tenor D2400 VoIP gateway call event telnetd | 23 | 0.006 |
http | D-Link DCS-920 webcam http config | 23 | 0.006 |
directconnect | Direct Connect P2P | 23 | 0.006 |
rtsp | Avtech MPEG4 DVR control rtspd | 22 | 0.006 |
http | AIP250 | 22 | 0.006 |
telnet | Mulberry Co-op Telco *** | 21 | 0.005 |
http | Vivotek Network Camera | 21 | 0.005 |
http | Squeezebox Server (7.5.4 - 32171) | 21 | 0.005 |
http-proxy | MikroTik http proxy | 21 | 0.005 |
http | Gunicorn | 21 | 0.005 |
http | D-Link DCS-900 webcam http config | 21 | 0.005 |
http | Tornado httpd | 20 | 0.005 |
http | Netgear DGN1000 router http config | 20 | 0.005 |
http | HTTP Software 1.1 | 20 | 0.005 |
http | HTTPServer 3.0 | 20 | 0.005 |
http | GS-Webs | 20 | 0.005 |
http | eHTTP v2.0 | 20 | 0.005 |
http | bywifi | 20 | 0.005 |
http | Webs | 19 | 0.005 |
http | RemotelyAnywhere remote PC management httpd | 19 | 0.005 |
http | Network Camera | 19 | 0.005 |
http | MikroTik router http config | 19 | 0.005 |
telnet | PE-5 Router | 18 | 0.005 |
telnet | First Link Technology, Inc. | 18 | 0.005 |
smtp | Postfix smtpd | 18 | 0.005 |
http | Windows NT | 18 | 0.005 |
http | Web Server | 18 | 0.005 |
http | ADH-Web httpd | 18 | 0.005 |
geovision-mobile | Geovision mobile device support | 18 | 0.005 |
vnc | Apple remote desktop vnc | 17 | 0.004 |
http | WSGIServer | 17 | 0.004 |
http | QNAP TS-219P NAS http config | 17 | 0.004 |
http | Motion Camera httpd | 17 | 0.004 |
http | Airlink 101 or TRENDnet TVIP-422w webcam http config | 17 | 0.004 |
dominoconsole | Lotus Domino Console | 17 | 0.004 |
telnet | cisco router pgp-gw6.ccl.ru | 16 | 0.004 |
http | Unreal Tournament http admin | 16 | 0.004 |
http | Switch | 16 | 0.004 |
http | Power-Sockets | 16 | 0.004 |
telnet | the Sirius Star System ! | 15 | 0.004 |
telnet | the BCC terminal server | 15 | 0.004 |
telnet | Quintum Tenor D3200 VoIP gateway call event telnetd | 15 | 0.004 |
telnet | cisco router sovetskaia47b-gw1.ccl.ru | 15 | 0.004 |
smtp | 15 | 0.004 | |
netbios-ssn | 15 | 0.004 | |
http | Wireless Network Camera | 15 | 0.004 |
http | Ubicom httpd | 15 | 0.004 |
http | Synaccess NP-16 or NP-1601D power management system httpd | 15 | 0.004 |
http | SonicWALL firewall http config | 15 | 0.004 |
http-proxy | F5 BIG-IP load balancer http proxy | 15 | 0.004 |
http | Netgear DG834G router http config | 15 | 0.004 |
http | httpd | 15 | 0.004 |
http | Cougar | 15 | 0.004 |
http | Chain Cast support service | 15 | 0.004 |
telnet | Allied Telesis x900-series switch telnetd | 14 | 0.004 |
smtp | Microsoft Exchange smtpd | 14 | 0.004 |
ovm-manager | Oracle VM Manager | 14 | 0.004 |
http | World Client WDaemon httpd | 14 | 0.004 |
http | WEBrick httpd | 14 | 0.004 |
http | Techno Vision Security System http config | 14 | 0.004 |
http | GoAhead-Webs | 14 | 0.004 |
telnet | the cisco router of Premium Techno Com. | 13 | 0.003 |
telnet | Quintum Tenor A800 VoIP gateway call event telnetd | 13 | 0.003 |
telnet | Quintum Tenor A400 VoIP gateway call event telnetd | 13 | 0.003 |
telnet | Frontier Internet * | 13 | 0.003 |
http | MikroTik router config httpd | 13 | 0.003 |
http | IP_SHARER WEB | 13 | 0.003 |
http | HTTPServer | 13 | 0.003 |
http | Apache WebSnmp module | 13 | 0.003 |
ftp | Gene6 ftpd | 13 | 0.003 |
rifa-dvr | Rifatron DVR | 12 | 0.003 |
memcache | memcached | 12 | 0.003 |
irc-proxy | psyBNC | 12 | 0.003 |
ice | Internet Communications Engine | 12 | 0.003 |
http | wg_httpd | 12 | 0.003 |
http | uClinux-httpd | 12 | 0.003 |
http | D-Link printer/webcam http config | 12 | 0.003 |
http | Buffalo AirStation http config | 12 | 0.003 |
http | avtech | 12 | 0.003 |
upnp | Portable SDK for UPnP devices | 11 | 0.003 |
telnet | cisco router mira102-gw2.ccl.ru | 11 | 0.003 |
secure-socket | CA Secure Socket Adapter | 11 | 0.003 |
irc | Unreal ircd | 11 | 0.003 |
http | uhttpd | 11 | 0.003 |
http | Sun ONE Web Server | 11 | 0.003 |
http | NewCS satellite card sharing system http config | 11 | 0.003 |
http | MX4J-HTTPD | 11 | 0.003 |
http | IronPort httpd | 11 | 0.003 |
http | Httpd | 11 | 0.003 |
http | H3C-Miniware-Webs | 11 | 0.003 |
http | Grandstream HT502 VoIP router http config | 11 | 0.003 |
http | ESET NOD32 anti-virus update httpd | 11 | 0.003 |
http | Apache Tomcat | 11 | 0.003 |
http | alphapd | 11 | 0.003 |
http | AIM HTTP | 11 | 0.003 |
telnet | NewCS card sharing system telnetd | 10 | 0.003 |
telnet | Lantronix UDS10 ethernet-serial telnetd | 10 | 0.003 |
ssh | SunSSH | 10 | 0.003 |
spotify-login | Spotify login server | 10 | 0.003 |
openvpn | OpenVPN | 10 | 0.003 |
http | YAZ Z39.50 http interface | 10 | 0.003 |
http | Xitami httpd admin port | 10 | 0.003 |
http | webserver | 10 | 0.003 |
http | WebLogic applications server | 10 | 0.003 |
http | Vivotek 3102 Camera http config | 10 | 0.003 |
http | Tracd | 10 | 0.003 |
http | Sun GlassFish | 10 | 0.003 |
http | Server | 10 | 0.003 |
http-proxy | Haproxy http proxy | 10 | 0.003 |
http-proxy | EZproxy web proxy | 10 | 0.003 |
http | Mathopd httpd | 10 | 0.003 |
http | Lotus Domino httpd | 10 | 0.003 |
http | JDav server 1.0 | 10 | 0.003 |
http | IBM WebSphere Application Server | 10 | 0.003 |
http | gen5th | 10 | 0.003 |
http | Bosch Divar Security Systems http config | 10 | 0.003 |